OpenClaw < 2026.4.20 - Gateway Config Mutation Guard Bypass via Agent Tool Access | Advisories

Advisories

OpenClaw < 2026.4.20 - Gateway Config Mutation Guard Bypass via Agent Tool Access

severity: high
date: 5/11/2026
Affecting: OpenClaw < 2026.4.20
CVE: CVE-2026-45001
CWE: CWE-862 Missing Authorization
CVSS: 6
CVSS V4 Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N
References: GitHub Security Advisory (GHSA-7jm2-g593-4qrc)
Patch Commit
Credit: zsx (@zsxsoft), KeenSecurityLab, qclawer
Description: OpenClaw before 2026.4.20 contains a guard bypass vulnerability in the agent-facing gateway config.patch and config.apply endpoints that fails to protect operator-trusted settings including sandbox policy, plugin enablement, gateway auth/TLS, hook routing, MCP server configuration, SSRF policy, and filesystem hardening. A prompt-injected model with access to the owner-only gateway tool can persist unauthorized changes to protected operator settings.

Ready to get Started?

Explore VulnCheck, a next-generation Cyber Threat Intelligence platform, which provides exploit and vulnerability intelligence to help you prioritize and remediate vulnerabilities that matter.

Vulnerability Prioritization
Prioritize vulnerabilities that matter based on the threat landscape and defer vulnerabilities that don't.
Early Warning System
Real-time alerting of changes in the vulnerability landscape so that you can take action before the attacks start.

Schedule a Demo